Care Unlock  
Your online unlock store
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact contact us.

Go Back   GSM-Forum > Product Support Sections > Hard/Software Products (official support) > Cyclonebox

Reply
 
LinkBack Thread Tools Display Modes
Old 12-10-2009, 06:10   #1 (permalink)
No Life Poster
 
misterG's Avatar
 
Join Date: Mar 2006
Location: Philipinas
Posts: 572
Member: 249276
Status: Online
Thanks: 2,647
Thanked 171 Times in 106 Posts
Thumbs up (12-10-2009) 5800 unlocked done

For safety backup RPL and PM 0-512 first

RPL LOGS:

RPL Creation started...
Processing CMT Part...
Storing Product Code...
Storing PSN...
Storing HWID...
Trying to store Simlock...
Reading Configuration Key...
Hashing...
Reading SHA1-RSA Signature...
Reading SHA1-HMAC Signature...
Storing Simlock...
Trying to store WMDRM RPL...
Reading Keys...
Storing WMDRM PD...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 15700014B37B00526F845954B548EFA32B087CD1
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID: 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Subsystem Not Found
Flashbus Write baud set to 5.0Mbits
Storing NPC...
Storing CCC...
Storing HWC...
CMT VARIANT Not Found
Restarting MCU...
RPL Saved OK

PM Backup LOGS:



Starting PM read in range 0-512...
[1] Reading 24 records
[1,0] Reading 114 bytes
[1,2] Reading 98 bytes
[1,4] Reading 110 bytes
[1,6] Reading 98 bytes
[1,8] Reading 110 bytes
[1,13] Reading 98 bytes
[1,16] Reading 98 bytes
[1,18] Reading 98 bytes
[1,20] Reading 98 bytes
[1,22] Reading 16 bytes
[1,23] Reading 4 bytes
[1,24] Reading 84 bytes
[1,25] Reading 4 bytes
[1,26] Reading 110 bytes
[1,28] Reading 98 bytes
[1,29] Reading 10 bytes
[1,31] Reading 98 bytes
[1,33] Reading 36 bytes
[1,34] Reading 80 bytes
[1,35] Reading 16 bytes
[1,37] Reading 4 bytes
[1,39] Reading 36 bytes
[1,44] Reading 182 bytes
[1,45] Reading 182 bytes
[2] Reading 1 records
[2,0] Reading 448 bytes
[4] Reading 4 records
[4,3] Reading 10 bytes
[4,4] Reading 8 bytes
[4,5] Reading 8 bytes
[4,9] Reading 5 bytes
[8] Reading 10 records
[8,0] Reading 2 bytes
[8,1] Reading 16 bytes
[8,2] Reading 16 bytes
[8,3] Reading 128 bytes
[8,4] Reading 128 bytes
[8,5] Reading 8 bytes
[8,7] Reading 4 bytes
[8,8] Reading 8 bytes
[8,9] Reading 8 bytes
[8,10] Reading 24 bytes
[11] Reading 5 records
[11,0] Reading 4 bytes
[11,1] Reading 4 bytes
[11,2] Reading 4 bytes
[11,3] Reading 4 bytes
[11,4] Reading 1061 bytes
[12] Reading 1 records
[12,0] Reading 102 bytes
[26] Reading 2 records
[26,0] Reading 16 bytes
[26,1] Reading 68 bytes
[31] Reading 1 records
[31,4] Reading 22 bytes
[44] Reading 1 records
[44,0] Reading 1 bytes
[50] Reading 1 records
[50,0] Reading 2 bytes
[54] Reading 2 records
[54,0] Reading 2 bytes
[54,2] Reading 24 bytes
[88] Reading 1 records
[88,0] Reading 36 bytes
[96] Reading 2 records
[96,0] Reading 2 bytes
[96,1] Reading 20 bytes
[107] Reading 6 records
[107,0] Reading 21 bytes
[107,1] Reading 79 bytes
[107,2] Reading 79 bytes
[107,3] Reading 70 bytes
[107,25] Reading 132 bytes
[107,26] Reading 12 bytes
[117] Reading 10 records
[117,0] Reading 4 bytes
[117,1] Reading 3 bytes
[117,2] Reading 6 bytes
[117,3] Reading 1 bytes
[117,5] Reading 10 bytes
[117,6] Reading 8 bytes
[117,8] Reading 104 bytes
[117,13] Reading 3 bytes
[117,14] Reading 3 bytes
[117,16] Reading 40 bytes
[120] Reading 4 records
[120,0] Reading 664 bytes
[120,1] Reading 80 bytes
[120,2] Reading 20 bytes
[120,3] Reading 112 bytes
[153] Reading 7 records
[153,0] Reading 68 bytes
[153,1] Reading 68 bytes
[153,2] Reading 68 bytes
[153,3] Reading 68 bytes
[153,4] Reading 68 bytes
[153,5] Reading 68 bytes
[153,6] Reading 68 bytes
[193] Reading 4 records
[193,2] Reading 8 bytes
[193,3] Reading 32 bytes
[193,4] Reading 32 bytes
[193,9] Reading 64 bytes
[208] Reading 1 records
[208,1] Reading 4 bytes
[217] Reading 1 records
[217,0] Reading 32 bytes
[291] Reading 1 records
[291,0] Reading 92 bytes
[308] Reading 7 records
[308,0] Reading 1 bytes
[308,1] Reading 8192 bytes
[308,3] Reading 1 bytes
[308,4] Reading 1 bytes
[308,6] Reading 1 bytes
[308,7] Reading 1 bytes
[308,9] Reading 40 bytes
[309] Reading 8 records
[309,0] Reading 4 bytes
[309,1] Reading 2 bytes
[309,2] Reading 12 bytes
[309,4] Reading 12 bytes
[309,5] Reading 12 bytes
[309,7] Reading 12 bytes
[309,8] Reading 12 bytes
[309,17] Reading 12 bytes
[313] Reading 1 records
[313,0] Reading 173 bytes
[322] Reading 1 records
[322,0] Reading 1 bytes
[329] Reading 1 records
[329,0] Reading 8392 bytes
[334] Reading 1 records
[334,0] Reading 1 bytes
[341] Reading 3 records
[341,0] Reading 1 bytes
[341,3] Reading 4 bytes
[341,4] Reading 4520 bytes
[354] Reading 1 records
[354,0] Reading 15 bytes
[356] Reading 2 records
[356,0] Reading 2 bytes
[356,1] Reading 8 bytes
[372] Reading 1 records
[372,0] Reading 48 bytes
PM Read OK, Time taken 13.156s

Proceed to unlocking:

BB5 Unlock Started...
MCU Version V ICPR72_09w06.2
MCU Date 03-03-09
Product RM-356
Manufacturer (c) Nokia
IMEI 356039036095170
Mastercode 531731773
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 15700014B37B00526F845954B548EFA32B087CD1
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID: 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 15700014B37B00526F845954B548EFA32B087CD1
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID: 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+343499099924346+1#
#pw+557825470936897+2#
#pw+073356908485759+3#
#pw+737628651856066+4#
#pw+887465207475644+5#
#pw+588843717149026+6#
#pw+972171054794714+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version V ICPR72_09w06.2
MCU Date 03-03-09
Product RM-356
Manufacturer (c) Nokia
IMEI 356039036095170
Mastercode 531731773
Simlock Server SIMLOCK SERVER
Simlock Key 2420200081019030
Simlock Profile 0000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: 3F007F206F07FFFF @ 0400 Data: FFFFF0FFFFFFFFFF
Simlock [1,2] State: OPENED Type: 3F007F206F07FFFF @ 0400 Data: FFFFF9FFFFFFFFFF
Simlock [1,3] State: OPENED Type: 3F007F206F07FFFF @ 0200 Data: FFFFFF0FFFFFFFFF
Simlock [1,4] State: OPENED Type: 3F007F206F07FFFF @ 0200 Data: FFFFFF3FFFFFFFFF
Simlock [1,5] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [2,1] State: OPENED Type: 3F007F206F07FFFF @ 0600 Data: FFFFF56FFFFFFFFF
Simlock [2,2] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [3,1] State: OPENED Type: 3F007F206F07FFFF @ 0600 Data: FFFFF59FFFFFFFFF
Simlock [3,2] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [4,1] State: OPENED Type: 3F007F206F07FFFF @ 0600 Data: FFFFF86FFFFFFFFF
Simlock [4,2] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [5,1] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0400 Data: FFFFF0FFFFFFFFFF
Simlock [5,2] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0400 Data: FFFFF9FFFFFFFFFF
Simlock [5,3] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0200 Data: FFFFFF0FFFFFFFFF
Simlock [5,4] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0200 Data: FFFFFF3FFFFFFFFF
Simlock [5,5] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [6,1] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0600 Data: FFFFF56FFFFFFFFF
Simlock [6,2] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [7,1] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0600 Data: FFFFF59FFFFFFFFF
Simlock [7,2] State: OPENED Type: MCC-MNC Data: 24202F
Simlock [8,1] State: OPENED Type: 7FFF6F07FFFFFFFF @ 0600 Data: FFFFF86FFFFFFFFF
Simlock [8,2] State: OPENED Type: MCC-MNC Data: 24202F
Simlock NCK #pw+972171054794714+7#
Unlock finished!

Br,

Mister G
  Reply With Quote
The Following 4 Users Say Thank You to misterG For This Useful Post:
Old 12-10-2009, 08:45   #2 (permalink)
Freak Poster
 
Join Date: Oct 2009
Location: Athens, Greece
Posts: 147
Member: 1140486
Status: Offline
Thanks: 105
Thanked 15 Times in 13 Posts
I also unlocked a 5800 yesterday. Why does this log only contain 2 simlock closed/open entries whereas the log posted above contains so many more?

BB5 Unlock Started...
MCU Version V ICPR72_09w06.2
MCU Date 03-03-09
Product RM-356
Manufacturer (c) Nokia
IMEI xxxxxxxxxxxxxxx
Mastercode 343231623
Simlock Server SIMLOCK SERVER
Simlock Key 2341500000000000
Simlock Profile 0000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: CLOSED Type: MCC-MNC Data: 23415F
Simlock [2,1] State: CLOSED Type: MCC-MNC Data: 23415F
Reading Security Block...
Security block OK!
Determining PA Simlock...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 02F00001F6978B525E6558661FF38E507B767B4D
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID: 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.37.1, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
FlashChip[0,CMT]: 0x00EC004000800121, Samsung, ONENAND
FlashContent[0,CMT]: 00000000000000000000000000000000, ONENAND
FlashChip[0,CMT]: 0xFFFF000000000000, Unknown, MMC
Transmission Mode Requested: Single Line, 8 bit, Accepted: Single Line, 8 bit
RAPIDOv11_algo.fg, Type: Algorithm, Rev: 0.1.40.0, Algo: XSR 1.5
Flashbus Write baud set to 2.0Mbits
Transmission Mode Requested: Dual Line, 32 bit, Accepted: Dual Line, 32 bit
Box TX2 Data Pin set to: Service Pin 3
Box VPP disabled
Internal CMT Phone VPP Enabled
PAPUBKEYS Hash for CMT: 76A20187051C30162EE91C77AE5E6011F5F1BA61
APE Boot skipped on user request
Flashbus Write baud set to 5.0Mbits
Restarting MCU...
Determined PA Simlock: PA_SL2
Checking for Rootkey Hash support...
Booting RAP...
CMT_SYSTEM_ASIC_ID: 000000010000022600010006400C192101031103
CMT_EM_ASIC_ID: 00000295
CMT_EM_ASIC_ID: 00000B22
CMT_PUBLIC_ID: 02F00001F6978B525E6558661FF38E507B767B4D
CMT_ASIC_MODE_ID: 00
CMT_ROOT_KEY_HASH: CAEEBB65D3C48E6DC73B49DC5063A2EE
CMT_ROM_ID: 4B9B75103E691FF8
RAPIDOv11_2nd.fg, Type: 2nd Boot Loader, Rev: 0.1.30.0, Algo: BB5
Flashbus Write baud set to 1.0Mbits
Flashbus Read baud set to 98Kbits
Exploiting - running preloader...
Preloader running OK, Running Custom Loader...
Custom loader running OK! Working...
#pw+736364261849809+1#
#pw+093542915799157+2#
#pw+842082873845100+3#
#pw+992163757288455+4#
#pw+666346560048734+5#
#pw+368785475569780+6#
#pw+374647486478230+7#
Sending NCK Code (Level 7)..
NCK Accepted! Phone unlocked OK!
MCU Version V ICPR72_09w06.2
MCU Date 03-03-09
Product RM-356
Manufacturer (c) Nokia
IMEI xxxxxxxxxxxxxxx
Mastercode 343231623
Simlock Server SIMLOCK SERVER
Simlock Key 2341500000000000
Simlock Profile 0000000000000000
Simlock Key Cnt 0
Simlock FBUS Cnt 0
Simlock [1,1] State: OPENED Type: MCC-MNC Data: 23415F
Simlock [2,1] State: OPENED Type: MCC-MNC Data: 23415F
Simlock NCK #pw+374647486478230+7#
Unlock finished!
  Reply With Quote
Old 12-10-2009, 10:37   #3 (permalink)
Super Moderator
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 48
Posts: 14,837
Member: 947561
Status: Offline
Thanks: 2,688
Thanked 11,374 Times in 4,991 Posts
The number of locked lines depends on the provviders..

BR

alex
  Reply With Quote
The Following 4 Users Say Thank You to moulnisky For This Useful Post:
Old 12-10-2009, 14:12   #4 (permalink)
No Life Poster
 
Join Date: Mar 2001
Location: ENGLAND
Posts: 513
Member: 3811
Status: Offline
Thanks: 3
Thanked 25 Times in 21 Posts
does this mean that 5800 with firmware 30.0.11 and simlock_key_data contain 8 lines in rpl can be down grade and unlocked ....
  Reply With Quote
Old 12-11-2009, 14:07   #5 (permalink)
Junior Member
 
Join Date: Jun 2009
Posts: 3
Member: 1054702
Status: Offline
Thanks: 4
Thanked 0 Times in 0 Posts
Hola queisiera saber si me podrias explicar los apsos que seguiste, de una manera detallada apra lograr la liberacion, te comento que soy novato, gracias
  Reply With Quote
Old 12-11-2009, 17:44   #6 (permalink)
No Life Poster
 
Join Date: Mar 2001
Location: ENGLAND
Posts: 513
Member: 3811
Status: Offline
Thanks: 3
Thanked 25 Times in 21 Posts
could you please post again in english thanks
  Reply With Quote
Old 12-12-2009, 03:50   #7 (permalink)
No Life Poster
 
misterG's Avatar
 
Join Date: Mar 2006
Location: Philipinas
Posts: 572
Member: 249276
Status: Online
Thanks: 2,647
Thanked 171 Times in 106 Posts
Quote:
Originally Posted by sargee View Post
Hola queisiera saber si me podrias explicar los apsos que seguiste, de una manera detallada apra lograr la liberacion, te comento que soy novato, gracias
Ano daw?

Post in english dude what did you say?
  Reply With Quote
Old 12-12-2009, 04:14   #8 (permalink)
Super Moderator
 
moulnisky's Avatar
 
Join Date: Jan 2009
Location: England
Age: 48
Posts: 14,837
Member: 947561
Status: Offline
Thanks: 2,688
Thanked 11,374 Times in 4,991 Posts
Quote:
Originally Posted by TEKIN View Post
does this mean that 5800 with firmware 30.0.11 and simlock_key_data contain 8 lines in rpl can be down grade and unlocked ....
Number of locked lines is the simlock data
Encryption keys are the simlock_key_data

BR

Alex
  Reply With Quote
Old 12-12-2009, 10:55   #9 (permalink)
No Life Poster
 
Join Date: Mar 2001
Location: ENGLAND
Posts: 513
Member: 3811
Status: Offline
Thanks: 3
Thanked 25 Times in 21 Posts
thanks so firmware for the 5800 with 8 Encryption keys in rpl cannot be unlocked by downgrading using the method in sticky ???
  Reply With Quote
Old 12-12-2009, 12:05   #10 (permalink)
No Life Poster
 
misterG's Avatar
 
Join Date: Mar 2006
Location: Philipinas
Posts: 572
Member: 249276
Status: Online
Thanks: 2,647
Thanked 171 Times in 106 Posts
Post Already posted here!

Quote:
Originally Posted by TEKIN View Post
thanks so firmware for the 5800 with 8 Encryption keys in rpl cannot be unlocked by downgrading using the method in sticky ???

Here:

Problems in Unlock 5800, N85, N96 Ver 30.0.11 and 31.0.8

Br,

Mister G
  Reply With Quote
Old 12-12-2009, 13:33   #11 (permalink)
No Life Poster
 
Join Date: Mar 2001
Location: ENGLAND
Posts: 513
Member: 3811
Status: Offline
Thanks: 3
Thanked 25 Times in 21 Posts
thanks will have to use MT server with new credits to unlock this set ....
  Reply With Quote
Old 12-12-2009, 13:35   #12 (permalink)
No Life Poster
 
shaazad's Avatar
 
Join Date: Oct 2009
Location: FAISALABAD, PAKISTAN
Posts: 622
Member: 1146078
Status: Offline
Thanks: 3,305
Thanked 97 Times in 59 Posts
thanks very much brother its a nice post
  Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
thread Thread Starter Forum Replies Last Post
5800 v.10.4.016 23.10.2009 not unlock ashraf_bcs Genie Universal 14 01-12-2010 10:17
23-12-2009 E63 unlock done misterG Cyclonebox 1 12-23-2009 06:58
2 pcs. 5800 unlock done in few minutes wapak05 Universalbox 5 05-11-2009 09:12


All times are GMT +1. The time now is 02:04.



Powered by Searchlight © 2013 Axivo Inc.
- GSM Hosting Ltd. - 1999-2013 -
Page generated in 0.34877 seconds with 11 queries

SEO by vBSEO